7.0 High Exploited · ransomware

CVE-2018-8120 Microsoft Win32k Privilege Escalation Vulnerability

Active exploitation observed

· CISA KEV catalogue

Required action Apply updates per vendor instructions.

Ransomware campaigns Known to be used

Weakness CWE-404

Description

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8124, CVE-2018-8164, CVE-2018-8166.

Affected products and versions

Product	Affected versions	Fixed in
Windows Server 2008	Versions not published
Windows 7	Versions not published
Windows Server 2008 R2	Versions not published

References

45653 www.exploit-db.com
1040849 www.securitytracker.com
104034 www.securityfocus.com
portal.msrc.microsoft.com portal.msrc.microsoft.com

Timeline

Published May 9, 2018
Added to the KEV catalogue March 15, 2022
Last modified August 13, 2026

The 107 CVEs of Windows Server 2008 →

CVE-2019-0582 A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in… Not rated CVE-2019-0549 An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka… Not rated CVE-2019-0554 An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka… Not rated CVE-2019-0575 A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in… Not rated

Track this CVE